reverting to Flask-security from master, issue mattupstate/flask-security#152 is merged